Published: 03/04/2017 Updated: 04/11/2017

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

CVSS v3 Base Score: 5.5 | Impact Score: 3.6 | Exploitability Score: 1.8

VMScore: 383

Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P

The mem_get_bits_rectangle function in base/gdevmem.c in Artifex Software, Inc. Ghostscript 9.20 allows remote malicious users to cause a denial of service (NULL pointer dereference and application crash) via a crafted file.

Vulnerable Product	Search on Vulmon	Subscribe to Product
artifex ghostscript 9.20

USN-3272-1 introduced a regression in Ghostscript ...

Several security issues were fixed in Ghostscript ...

Debian Bug report logs - #859694 ghostscript: CVE-2016-10220 Package: src:ghostscript; Maintainer for src:ghostscript is Debian Printing Team <debian-printing@listsdebianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Thu, 6 Apr 2017 06:03:01 UTC Severity: important Tags: patch, security, upstrea ...

Debian Bug report logs - #859696 ghostscript: CVE-2017-5951 Package: src:ghostscript; Maintainer for src:ghostscript is Debian Printing Team <debian-printing@listsdebianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Thu, 6 Apr 2017 06:12:02 UTC Severity: important Tags: patch, security, upstream ...

Debian Bug report logs - #861295 ghostscript: CVE-2017-8291: shell injection Package: src:ghostscript; Maintainer for src:ghostscript is Debian Printing Team <debian-printing@listsdebianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Thu, 27 Apr 2017 05:06:01 UTC Severity: grave Tags: fixed-upstre ...

Debian Bug report logs - #859666 ghostscript: CVE-2016-10219 Package: src:ghostscript; Maintainer for src:ghostscript is Debian Printing Team <debian-printing@listsdebianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Wed, 5 Apr 2017 18:51:02 UTC Severity: important Tags: patch, security, upstrea ...

Debian Bug report logs - #859662 ghostscript: CVE-2016-10217 Package: src:ghostscript; Maintainer for src:ghostscript is Debian Printing Team <debian-printing@listsdebianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Wed, 5 Apr 2017 17:27:02 UTC Severity: important Tags: patch, security, upstrea ...

The mem_get_bits_rectangle function in base/gdevmemc in Artifex Software, Inc Ghostscript 920 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted file ...

CWE-476 https://bugs.ghostscript.com/show_bug.cgi?id=697548 http://www.securityfocus.com/bid/98665 https://security.gentoo.org/glsa/201708-06 http://www.debian.org/security/2017/dsa-3838 https://nvd.nist.gov https://usn.ubuntu.com/3272-2/

CVE-2017-5951

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect